設定の構成

パラメーター

Configuration Flag

既定値

説明

$wgOATHAuthWindowRadius

4

The number of token windows in each direction that should be valid. This tells OATH to accept tokens for a range of effectively ((1 + 2 * $wgOATHAuthWindowRadius) * 30) seconds. This range of valid windows is centered around the current time. The purpose of this configuration variable is to account for differences between the user's clock and the server's clock. However, it is recommended to keep it as low as possible.

$wgOATHAuthDatabase

false

The database domain. Only used in a multi-database environment.

$wgOATHAuthSecret

false

The base OATHAuth secret for this wiki from which all encryption keys are derived. If false, the value of $wgSecretKey is used.

$wgOATHAuthAccountPrefix

false

The prefix used for the OATHAuth user account name and the issuer used for the account. If false, the value of $wgSitename is used.

管理

Resetting a user token

In the event that a user both loses their token generator AND the recovery tokens; two-factor authentication may be removed from the user by deleting their row from the oathauth_users database table.
A sysadmin with shell access may type on a command line cd /path/to/mediawiki/extensions/OATHAuth/maintenance/ and then execute php disableOATHAuthForUser.php "username" where "username" is the user to have 2FA disabled to have it disabled.